remove usage of `transfer` and `send`

[rmeissner]

Currently we still use send and transfer to trigger the refund payment. These should be replace by call.

TODO: Evaluate possible reentrancy vectors